Zero Day Monitor

Zero Day MonitorZDM

Dashboard Vulnerabilities Trending Zero-Days News About

Impressum Privacy Policy

Zero Day Monitor © 2026

2981 articles · 185103 vulns · 37/41 feeds (7d)

182,596 vulnerabilities total

jetbrains · CVE-2026-63077 — CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollinKEVEXPLOITEDPATCHED

teamcity· CVSS 9.8· CWE-502

trueconf · CVE-2026-3502 — TrueConf Client Update Integrity Verification BypassKEVEXPLOITED

trueconf· CVSS 7.8· CWE-494

microsoft · CVE-2026-50522 — Microsoft SharePoint Remote Code Execution VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 9.8· CWE-502

microsoft · CVE-2026-56164 — Microsoft SharePoint Server Elevation of Privilege VulnerabilityKEVEXPLOITEDPATCHED

sharepoint_server· CVSS 5.3· CWE-306

linux · CVE-2026-31431 — crypto: algif_aead - Revert to operating out-of-placeKEVEXPLOITEDPATCHED

linux_kernel· CVSS 7.8

progress · CVE-2026-8037 — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFKEVEXPLOITEDPATCHED

connection_manager_for_objectscale· CVSS 9.6· CWE-77

langflow · CVE-2026-9198 — Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationKEVEXPLOITEDPATCHED

langflow· CVSS 9.8· CWE-94

apache · CVE-2026-34197 — Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansKEVEXPLOITEDPATCHED

activemq· CVSS 8.8· CWE-20

langflow · CVE-2026-0770 — Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution VulnerabilityKEVEXPLOITED

langflow· CVSS 9.8· CWE-829

checkpoint · CVE-2026-50751 — User Authentication Bypass in VPN Remote Access and Mobile AccessKEVEXPLOITEDPATCHED

gaia_os· CVSS 9.3· CWE-287

red hat · CVE-2026-4480 — Samba: samba: remote code execution in printing subsystem via unescaped job descriptionKEVEXPLOITEDPATCHED

openshift_container_platform· CVSS 8.5· CWE-78

apache · CVE-2026-34486 — Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorEXPLOITEDPATCHED

tomcat· CVSS 7.5· CWE-311

alinto sogo · CVE-2026-8496 — A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7KEVEXPLOITEDPATCHED

sogo· CVSS 6.1· CWE-79

exim · CVE-2026-45185 — CVE-2026-45185: Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing pEXPLOITEDPATCHED

exim· CVSS 9.8· EPSS 0.01· CWE-416

arista · CVE-2026-16812 — VeloCloud Orchestrator OS Command InjectionPATCHED

velocloud_orchestrator· CVSS 10.0· CWE-78

linux · CVE-2026-53359 — KVM: x86: Fix shadow paging use-after-free due to unexpected roleEXPLOITEDPATCHED

linux_kernel· CVSS 8.8

linux · CVE-2026-46331 — net/sched: fix pedit partial COW leading to page cache corruptionEXPLOITEDPATCHED

linux_kernel· CVSS 7.8

microsoft · CVE-2026-42897 — Microsoft Exchange Server Spoofing VulnerabilityKEVEXPLOITEDPATCHED

exchange_server· CVSS 8.1· CWE-79

apple · CVE-2026-65400 — CVE-2026-65400: An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOSEXPLOITEDPATCHED

macos· CVSS 7.1· CWE-20

n8n · CVE-2025-68613 — n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workKEVEXPLOITEDPATCHED

n8n· CVSS 9.9· CWE-913